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1.0  INTRO PCCTl  OH 

The  doslgr  •£  fay  atruotnro  la  dspendant  on  tha  individual 
study  af  a  "load"  rhAraat*riatlc  and  a  "strength"  property,  and 
iha  adeqoaey  af  iba  daalgn  la  generally  assured  by  aaintulsing  a 
"faster  af  safety"  between  aush  a  land  and  strength.  Ordinarily 
thaaa  thraa  aaaantial  elements  far  daalgn,  l.t.,  the  lead,  iba 
ctrength,  and  tha  aafaty  factor,  ara  iha  raapaaalbll 1 ty  af  oer- 
tain  spesif laatian  writing  bodiaa,  iha  only  responsibility  af 
iha  designer  and  atruotures  anglnoar  being  ta  neat  tha  ariterla 
apaaiflad  by  anoh  groups.^  Thao,  the  actual  aafaty  af  tha  final 
atruoture  depends,  flrat  af  all,  on  the  adequacy  af  iha  daalgn 
criteria,  aad  aaaondly,  an  tha  ability  of  iha  pradnat  ia  neat 
apeolf iaatlona. 

Aa  ia  vail  known,  eenaiderable  affari  haa  bean  expanded  a war 
tha  paat  half-oantury  tavarda  improving  onr  under® tending  af  tha 
behavior  of  atrnatnraa  and  atmctnral  materials.  Great  pr agree e 
haa  been  remitted  in  netheda  af  atraaa  analyst*  and  mar*  efflalani 
■atariala  hare  bean  introduced.  Unfortunately,  bawawar,  tha  da* 
sign  oritarla  phase  of  tha  prtblen  has  bean  relatively  ignored, 
eepeelally  tha  rale  of  aafaty  faotera.  Only  reeently  haa  it  beam 
realised  that,  no  natter  how  amimllw  a  doilwm  air  ha.  there 

'  uti.<ri  ft  .nil  ifemt  .iX.lta.  l&Ua n»  Rad  * 

nrtbibllltl  «ut  tm  tha  basis  far  any  rational  Aaslmn  erect  dura., 

Tha  naa  of  rather  arbitrary  aonstaat  anltipllere,  no  faotora  af 
aafaty,  reeulta  in  a  daalgn  whleh  nay  be  highly  anbalaneed  with 
reapaot  to  safety,  and  whleh  haa  aa  olearly  discernible  probability 
af  failure.  It  la  senseless  to  anplay  highly  refined  methede  of 
■trangth  analyaia  onleae  equal  consideration  ie  also  given  ta  iha 
lead  analyaia  and  ta  tha  aafaty  margin  between  strength  and  laado 

1.  Struainral  daalgn  erlteria  far  aere-spaee  vehicles  and  061  are 

prepared  by  tha  oantraster '»  structures  group.  Thaaa  atmctnral 
daalgn  orltaria  reports  define  loading  conditions,  establish  or 
refarenat  factors  af  aafaty,  list  approved  apeeif ieatione, 
sources,  ate.,  and  ara  submitted  to  tha  contracting  aganoy  for 
approval „ 
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With  the  realisation  that  onrruut  design  proctdurti  lack  a 
rational  basis  fer  safety,  sststsI  questions  naturally  ooie  to 
alnd  What  really  is  the  significance  of  a  safety  factor? 

What  practical  benefits  can  bs  dsrirsd  froa  attsaptiog  ts 
sstablish  asro  rsallstie  Lsaiorsi  of  safety?  What  factors  1 n- 
flusnos  tbs  probability  of  failure?  What  probability  of  failure 
is  realistically  acceptable?  What  is  ths  statistical  nature  of 
loads  and  environmental  conditions?  -  of  strength  of  aatsrlala 
and  behavler  of  stractnrss?  And  finally:  What  stops  aaat  bs 
taken  ts  provide  more  rational  bases  for  design  decisions? 

In  ths  past  dogen-er-ao  years  a  flourish  of  writings  ban 
appealed  endsavoring  to  answer  such  questions,  Inorsasing 
OBfhasit  on  tbsos  problems  is  apparent  in  both  the  civil  engineer¬ 
ing  and  asroaactical  engineering  fields,  as  can  be  seen  from  the 
bibliography  at  the  end  of  this  report.  Of  particular  significance 
In  the  field  of  civil  engineering  la  the  recent  organisation  of  ths 
Committee  on  Factors  of  3afety  by  ths  American  Society  of  Civil 
Englaeors  (r*f «  1-37,  h'?,  62).  Tho  purpose  of  this  comities  is 
to  define  faotere  of  eafety  in  relation  to  probabi  1 1  ti  ee  of  fail¬ 
ure  or  nnaervi  ceabi  1 1  ty  and  to  reoomtnd  farns  of  such  factors  for 
future  nee.  The  practical  benefita  possible  through  these  studies 
are  quite  obvious.  Not  only  can  ths  reliability  of  structures  bs 
controlled,  but  suvlnga  in  weight  end  oost,  and  l.ncreaeed  per¬ 
formance,  cau  be  realiied  without  sacrificing  ca  fety. 

The  intent  of  this  report  is  to  auasariie  the  funduaental 
concepts  of  structural  safety  and  review  the  progress  being  made 
tewarda  understanding  its  true  nature.  The  probubi 1 i ty  of  failure 
ie  introduced  as  a  structural  design  criterion,  and  the  role  of 
eafety  factors  in  design  is  discussed  in  relation  to  probability 
concepts.  Tho  variable  nature  ef  leads  and  notarial  properties 
ie  only  briefly  dlecussod  no  It  will  k«  tho  eubjrct  of  later  re¬ 
ports.  Throughout  this  report  tbo  tones  'loads’,  Strength*,  sad 
’failure"  are  used  in  tbolr  broadest  sense.  Bj  ’load*  la  aeant 
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any  iapoaod  condition  of  farooa,  taaipa  r  atur  a ,  vibration,  datamation, 
ato,  by  "ttranfth"  ia  aaant  the  capacity  of  a  atrnctora  to 
raaiat  suck  "loads”;  and  "failora"  laplioa  any  nndaairabla 
condition  of  fracture,  yielding,  wear,  orttp,  etc. 
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1.0  Bigimmmg  Btsum.  wasm 

In  order  to  understand  the  prcblen  ef  structural  safety 
It  le  well  te  first  oensider  the  basis  legle  behind  deeitlon 
naking  preeesses.  The  fundamental  difficulty  in  engineering 
is  that  eenolusiens  must  be  drawn  sbeut  a  future  aituatien  the 
exact  nature  of  which  is  unknown*  Thus,  the  real  probleai  is 
one  ef  prediction  of  future  behawicr  and  ewents  and,  as  sueh, 
is  net  explicitly  sellable.  In  uaking  a  decision  about  a  real 
situation  the  engineer  or  scientist  vust  resort  to  abstractions 
of  the  real  prcblen  and  base  his  conclusions  on  the  inter¬ 
pretation  of  abstract  results.  Sueh  a  decision  presses  Is 
shown  sohenatlcclly  in  Figure  1. 


Figure  1;  flehenatje  Representation  of  an  Bngjnoering  Decision  Process 
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Tho  flow  diagram  illustrated  la  Figure  1  shew*  that  con¬ 
clusions  about  a  roal  world  problem  may  bo  resehed  by  two  fou- 
dsmentelly  different  paths,  tho  omo  based  on  observations  of 
actual  past  events,  and  the  othor  on  tho  laws  of  abstract 
science.  This  la,  of  course,  a  aimpllfiod  representation,  aa 
•  ach  path  usually  involves  aomo  concepts  from  tho  other,  and 
oaoh  operation  may  Include  many  separate  decision  prooeaaea. 

By  following  both  paths  slmal taneeualy  and  coordinating  results, 
tho  reliability  of  tho  final  oeaoluaieus  san  often  bo  lnsrsased. 
Another,  mere  ooanon,  prooedmro  for  inereasing  oenfldeaes  la  to 
run  several  analyses  la  ssriss,  using  tho  results  of  sash  pro-* 
oedlng  investigation  to  obtain  a  better  abstract  model  for  the 
next  analysis.  Suoh  a  oontlnual  refinement  presses  has  been 
the  usual  oourae  ef  events  throughout  tho  history  of  selecoa  and 
tnginsoring. 

The  important  thing  to  realise  Is  that  the  solution  to  am 
engineering  problem  le  not  as  o lear-eut  as  we  would  like  t» 
think.  In  fact,  the  exact  nature  ef  the  problem  itself  le  un¬ 
known  sines  we  are  ignorant  of  future  reality.  Vs  oan  only  deal 
with  an  abatraotlon  af  the  real  problem,  apply  experimental  legle 
and/or  mathematical  legle  to  the  abstraot  model,  amd  use  the 
abetraei  results  as  a  guide  to  daeleiem  making.  Suoh  a  preoeas 
always  involves  a  oertain  amount  ef  judgement,  Neither  mathe¬ 
matical  deductions  ner  statistical  Inferences  sou  provide  us 
vith  a  real  solution,  bn.  both  ion  besoms  effective  tools  whisk. 
If  properly  used,  will  lead  us  to  more  rations!  sensluaiona. 
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3c 0  THE  PROBABILITY  OP  PAI LURE  AS  A  3THUCTURAL  DESIGN  CRITERION 

Ii  establishing  criteria  oa  which  to  bane  a  structural 
design  we  are  required  to  define  conditions  of  "lead"  and 
"atrength"  (ref.  pages  3,  4),  We  therefore  Must  predict  realistic 
levels  ef  these  conditions;  generally,  the  extreae  levels  which 
ear  structure  may  possibly  encounter  within  its  lifetlae.  Since 
it  is  iapessible  to  predict  sach  conditions  with  certainty,  we 
■act  obtain  rational  estimates  through  the  nse  of  the  logical 
decision  preeeaaos  previously  discussed.  In  doing  this  we 
accept  a  certain  degree  of  risk  that  eur  conclusions  are  in¬ 
correct  and,  consequently,  there  will  always  exist  a  definite 
probability  ef  failure.  It  is  logical  that,  as  oar  first  step 
in  design,  we  define  an  acceptable  naxlana  value  for  this  prob¬ 
ability  of  failnrco 

The  level  of  failure  probability  to  which  structural 
coaponont  should  be  designed  aust  be  determined  by  weighing  its 
functional  importance  and  eoenonic  value  against  the  consequenoos 
and  cast  ef  failure.  As  previously  mentioned,  there  are  several 
types  of  structural  failure  conditions  to  consider,  Catastrophic* 

la  In  order  to  establish  and  define  the  orltical  condition  ef 
catsstrephl  c  fat  lure  ef  a  structure,  the  different  modes  ef 
collapse  ef  structural  resistance  aust  be  considered.  Collapse 
can  be  preduoed  by: 


An  The  instability  er  fraoture  of  one  or  several  primary 
structural  elements  er  connectiens  under  a  single 
appl  cation  of  an  excessive  load  or  1 oad- temperature 
condi ti ea. 


b0  The  fracture  of  one  er  several  primary  structural 
elements  er  connectiens  as  a  result  ef  creep  er 
fatigue  under  the  sustained  or  intermittent  appli¬ 
cation  ef  a  ranoea  (er  periodic)  sequence  ef  leads 
and  temperatures,  the  intensity  and  frequency  of  which 
is  described  by  a  three  dimensional  1 oad- veaperature- 
tiae  epeotium 
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ae  vail  aa  ai  nor  failures  aajr  reaull  fro*  instability,  fracture, 
or  fatigue.  Unoervl ceabi  1 1  ty  will  bo  oauaad  by  auob  conditions 
aa  yielding,  oxesaslTO  oraap  dafonaation,  inanffiolant  atlffnaaa, 
vaar,  and  carroaian.  It  la  apparent  that  some  of  these  failure 
oenditiona  are  aero  important  than  othara.  We  can  accept,  for 
axaapla,  afreater  failure  probability  for  yielding  of  a  struct¬ 
ure  then  for  catastrophic  fatigue^  Thua  ve  hare  te  coneider  each 
type  of  failure  and  ureervl ceabi 1 i iy  condition  separately  and 
eraluate  the  different  risks  involved  in  order  to  arrive  at  d a - 
sign  levels  of  failure  probability. 


The  probability  of  failure  of  aircraft  or  nlaaile  structures 

uay  be  expressed  in  various  forma  (ref.  I  -  3S,  39,  43,  44,  6l). 

Far  example,  ve  aiay  expreaa  the  failure  rate  of  an  aircraft 

as  the  expeoted  failures  per  mile  of  flight,  per  hear  of  flight, 

or  per  mission.  Typical  design  valuea  of  tolerable  failare 

probabi 1 i ties  of  civil  aircraft,  exproased  in  hears  of  flight, 

would  be  of  the  order  of  nugnitudo  of  10~*  for  yielding,  10  ^ 

for  failures  under  ground-load  oenditiona,  10'"  far  in-flight 

-9 

failures  ether  than  fatigue,  and  10  for  catastrophic  fatigue 
failures  (ref.  I  -  44).^ 

Another  fora  for  apecifying  failure  probability,  suggeated 
by  Preudeathal  (ref »  -  35),  is  te  define  the  acceptable  risk  ef 


2 c  Miner  f al lures  vould  result  from  similar  modes  of  collapse 

of  one  or  several  secondary  structural  elements  or  connections. 

3.  One  should  not  assume  that  an,  across- the-beard ,  increase  in 

the  allowable  probabilities  of  failure  for  nissiles  is  advisable; 
the  contrary  nay  bs  true,  "It  should  be  remembered  that  compo¬ 
nents  used  in  guided  nioolles  must  bs  mere  reliable  than  these 
ef  piloted  aircraft  bjr  about  one  order  of  wainl tudo"  (ref.  1  -  n). 
A  thorough  statistical  investigation  along  a  missile  life-mission 
concept  approach  and  accounting  for  considerations  ef  safety 
(ref.  p.  11)  is  required  to  determine  allowable  probabilities 
of  failure. 
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failure  »r»r  the  entire  itrric*  ’lfetlne  e  f  the  structure. 

-8 

Taking  tka  ikirt  axanple  af  an  alreraft  failara  rata  af  10 
pur  hair,  and  aappaaiag  tkat  tka  alrplana  la  expected  ta  ha re  a 
awrrlee  llfa  af  20,000  hoora ,  then  tba  ehanoa  of  aa  alreraft 
•r»r  haring  an  in-flight  atruetnral  failure  In  lta  llfatlna 
vould  ba  1  In  5000„  Tula  aathad  af  axpreaalng  failnra  rlak  in 
iralatien  to  tha  overall  hit  af  tha  atraeture  aaaaa  to  provide 
the  alnpleat  and  aoat  rational  eaala  for  a  design  critaria.  It 
la  expeelally  vell-auited  far  niaaile  atrue&urea. 

Ia  oannaetlan  vith  llfatlna  failnra  prahabi 1 1 tlaa ,  Froudon* 
tkal  daflnaa  tha  fallowing  two  tarna  (ref0  I  -  38): 

Httnri  lariod  -  tka  axpaetod  tina  hatwean  aeoarancaa  of  aa 
axtrano  high  load  -  low  atrangth  oonbinatien  which,  apon  lta 
aingla  application,  eauaaa  atruetnral  failure. 

la turn  aankar  -  tha  nanbar  af  repatltlana  or  eye laa  af  a 
atandard  la«d  pattara  tkat  will  raault  In  a  atruetnral  failnra., 

Since  tka  probability  ahould  ba  axtraaaly  anall  that  a  etrnetnra 
will,  in  lta  llfatlna,  aneauntar  a  load-atrangth  oanblaatlan 
tkat  eanaaa  failnra,  tha  "return  peried"  of  aueh  a  laad-atrength 
combination  ahanld  ba  wary  nneh  longer  than  tha  daolgn  llfa  af 
tha  atruaturao  In  tha  previous  axanpla,  for  laataaoa,  tha 
"raturn  pariad"  af  tha  oritieal  1 aad-a trangtb  eanbinatian  that 
aauaaa  in-flight  atruetnral  failure  la  5000  tinea  tka  daaign 
llfa  af  tha  alreraft.  Sinllarly,  the  "return  nanbar"  af  a 
load  pattarn  ahanld  ba  nada  rary  nmek  higher  than  tha  total 
nunber  af  load  application!  expected  dnrlag  tha  lifatina  af 
tha  atrueturao 
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4.0  THE  SIGNIFICANCE  OF  SAFETY  FACTORS 

la  aircraft  and  aiaallo  fialda  tha  oarrant  praotloa  is  ta 
eapley  tha  "Halt  land”  design  concept,  aa  appeaad  ta  tha  "working 
atraaa"  appraaeh  naad  in  aaohanleal  nad  oiril  engineering  (thaaa 
two  concapta  arc  diaaaaaed  by  Goldin  ia  raf.  I  -  36).  Only  tho 
"liait  land"  type  af  eritarin  will  ba  oonaidarad  in  thin  report. 


Tha  ter*  "liait”  (na  applied  ta  aircraft  atruotural  deaign 
criteria)  firat  appeared  in  Part  04  af  tha  Civil  Air  Regulations 
af  1038o  It  wan  uaed  ta  specify  tha  aotnal  nail ana  lead  fattaii 
expected  ta  be  experienced  by  aircraft  in  given  flight  and  grennd 
handling  canditieaa.  As  snob,  "liait  lead  factara  rapraaantad 
actaal  "Halting"  oandltleaa  af  eoeeleratiea  af  an  aircraft,  tha 
factara  thaaaalvaa  being  tha  ratio  between  lcada  in  tha  accelerated 
and  nnaooalaratad  (lg)  oanditiena.  Tha  tara  "liait"  waa  alao 
adopted  by  tha  A  nay  and  Navy  threagh  tha  af forte  af  tha  AXC  Cea- 
aittaa  on  Airoraft  Raqairaaaata  (a  hiatary  af  tha  development  af 
airoraft  daaiga  oritaria  ia  given  by  Hungarian  in  raf.  I  -  21). 
Currant  Civil  Air  Regulation*  (Parta  3  and  4b)  define  liait  lead 
aa  "tha  aaxinua  load  anticipated  in  oervice".  Slallar  dafinitioaa 
appear  la  corresponding  Air  Farce  and  Navy  ape ei f 1 oatl ana  far 
aircraft  and  nlaailea.  Daaiga  criteria  baaad  on  tha  liait  lead 
phlloaophy  have  proved  ta  bo  adequate  for  flight  atruoturea  af 
tha  paat.  However,  with  tho  advent  af  niaailaa  and  high  appnd 
aircraft,  and  with  tha  uaa  of  now  natarlala  at  high  working  atresse 
oenaideratlon  amt  bo  givoa,  net  jaat  to  aaxiaua  lead  conditions; 
but,  ta  tha  entire  load-tenperature-tiae  hiatory  of  tho  vahiolo. 
"Liait  conditions",  defining  load  pattern,  cycloa  of  loading, 
teaperature,  and  tlao  duratlona,  ahould  raplaoo  the  "Halt  load" 
aanoapt  in  order  ta  effectively  account  for  aeredyuaaic  heating 
aad  fatigue  prablaaa  in  doaign  (raf.  I  -  38,  34). 
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Since  Unit  leads,  or  rather  Halt  conditions,  represent  actual 
situations  likely  ta  be  encountered,  certain  faetara  af  safety 
ara  raquirad  to  ensure  against  fallare  or  uns a rvl  e eabl 1 i ty  af  tha 
structure  under  that#  conditions^  Sack  safety  faotora  nast  account 
for  all  of  tha  following* 

A 

1.  Tha  accuraoy  of  pradletad  laada  and  anvlrauatit 

2  Tha  dagraa  of  variability  and  tha  Batura  af  tha  frequency 
diatrlbutlaua  of  tha  daaign  loading  conditions 

3  Tha  accuracy  and  extent  af  the  atraaa  analysis,  fatigue 
analysia  and/or  the  dagraa  of  experiaentati an. 

4.  The  variability  in  tha  raslstanca  af  aaterlaje  and  structures, 

Sc  Tha  dagraa  af  inspection  and  quality  control. 

0.  The  variability  of  residual  strassas  or  a ccantr  1  c 1 tl as 
rasalting  froa  tolerance  build-up,  aisallgnasnt,  ate., 
due  to  poor  design,  aatorial  control  or  assembly, 

7.  The  degree  of  aaiatonanee  of  the  original  strength  standard 
(affects  of  dotarioratlon  duo  to  corrosion  or  deficiehh 
aalrtenance )  by  tha  aparatoro  during  tha  life  of  the  vehicle, 

8c  The  degree  of  workaanshlp,  teleranoa  Halts  «nd  surface 

finish  specified  far  tha  aanufaetare  of  structural  oloaanto. 


1,  Within  the  oalcalatad  probability  af  their  oseurrnaaso 

2 .  Loads  and  anvironaant  far  Igunoh  and  flight  canditians  for 
aora-opaco  vehicles  ara  usually  pradletad  with  sufficient 
accuracy  so  that  tha  reduced  faotor  of  safety  far  these 
vehicles  doss  not  account  for  any  load  or  environment  errors 
or  uncar tai sties o 
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Jo  The  Tala*  * f  til  the  benefit*  which  the  atruetur*  can  be 
expected  t#  preride  fer  it*  uaera,  c«n  be  expreaaed  *a  a 
capital  ana  which  we  Might  call  the  aerric*  rain*  *f  the 
atruetur*.  It  ia  the  engineer'e  taak  to  deaign  the  atractare 
e*  that  ita  aerric*  rala*  exceed*,  by  aa  aach  «a  pcaaible, 
the  ceat  of  producing  and  Maintaining  it  Thie  predoctiea 
and  aaintenanc*  coat  ia  Made  up  of  the  original  coat  of  cea- 
atructlen,  the  capitalized  coat  of  aerric*  and  Maintenance 
during  ita  eerrioe  life  and  the  coat  of  repairing  or  rtcti- 
atruotiag  the  whale  atruoture  or  ita  aeparate  parte  beoauee 
of  deterioration,  failure  *r  oellapa*.  Ia  the  coat  of  Much 
niehapa  anst  be  included  the  coat  of  d an age  t*  neane  *f 
preductien  ether  than  the  atructur*  itaelf  (other  atrncturea, 
rehiclea,  eto.)  and  the  coate  of  Injury  *r  leae  of  lif*o 


A 


CONVAIR 


ASTRONAUTICS 


MfMT.  AZS-OOt 

PMl _ 13 _ 


5 . 0  THE  BFFEC7S  ON  dTHUCTUHAL  9E3IGN  Of  A  PRuRABIUTY  OF  FAI LUR1, 

FACTOR  OP  SAFETY  APPROACH 

At  preaent,  the  engineer  la  faced  with  the  Joint  affact  af 
unoartalntiaa  in  axtarnal  leadings  and  internal  strength  of 
materials.  The  importance  of  a  correlation  of  these  two  random 
phenamona  cannat  be  emphasised  enough,  and  a  reason  why  this  has 
bean  neglected  se  long  is  that  there  are  usually  two  entirely 
different  groups  of  specialists  who  formulate  or  Influence  design 
loads  and  minimum  strongth  ralues :  There  are  government  officials 
or  technical  grouts,  on  one  side,  while  on  tne  other  side  are 
material  manufacturers,  government  material  specification  writers 
and  specialists  in  the  technology  of  materials.,  (Most  aero-space 
vehicle  manufaturers  are  attempting  to  close  this  gap  in  structural 
design  technology.)  Clearly,  it  is  the  structures  snglneer  who 
stands  between  the  two  groups  and  who  has  to  bring  the  toe  sources 
of  information  together  by  means  of  the  structural  analysis.  If, 
however,  the  structures  engineer  asks  for  information  from  the 
neighboring  breaches  of  engineering  in  a  greatly  simplified  form 
(e.g.,  furnish  a  su,le  constant  for  whnt  in  reality  is  a  whole 
distribution  function),  the  tvs  neighboring  groups  are  farced  to 
round  their  figures  off  and  put  a  certain  safety  margin  into 
their  specifications  on  acoount  of  the  later  oversimplified  treat¬ 
ments  If,  however,  a  oertaln  safety  in  the  load  assumptions  Is 
already  includod  in  the  form  of  an  unlikely  or  infrequent 
03 curron am*  the  same  is  done  in  the  field  of  material  technology, 
and  the  structures  engineer  superposes  hie  own  safety  factor, 
then  it  is  likely  in  some  cases  that  the  end  result  is  unreasonably 
Safe  o 

Ir  an  effort,  therefore,  to  achieve  maximum  economy  and  at 
the  same  time  ensure  adequate  safety,  the  structures  engineer 
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hti  te  insist  that  all  information  on  the  strength  properties  ef 
materials  and  tha  anticipated  loads  on  the  strnotare  are  given 
te  hiai  in  a  completely  unbiased  fern  and  *c  realistic  as  possible. 
Hoverer,  in  nost  cases,  this  is  only  possible  by  aeana  ef  statistios. 
The  strnotures  engineer  subsequently  ought  to  be  in  a  position  te 
read  this  statistical  inforaatiea  and  derive  results  and  conclusions 
the  re  f  ros0 

When  the  structures  engineer  has  this  statistical  information 
for  loads  and  environment,  he  should  be  able  to  divide  certain 
design  aspects  into  two  categories  and  attack  the  'factor  ef 
safety  -  probability  ef  failure''  sppreacho  This  will  result  in 
an  Increased  and  siere  balanced  level  ef  reliability,  rednced 
oesta,  reduced  weight  and  adaquate  safety  for  our  future  doslgsoc 

la  bath  of  the  follawing  categories,  adequate  eo na 1 der a tl  an 
must  be  given  to  the  factor  of  safety  requirements  (specified 
on  p  ll),  ssrvi oeabi 1 i ty  and  mai  ntai nabi 1 i ty . 

Category  A.  -  Design  aspects  wherein  a  reduction  in  ultimate 
factor  of  safety  should  not  be  consi dsrsd  at 
this  time.  In  foot,  an  i  ove a tl ga ti on ,  through 
a  probability  of  failure  approach,  may  lndieat# 
an  increase  in  the  "factor  of  safety*  would  be 
rsqnlrsd  ta  attain  the  required  level  of  safety. 

Examples  in  Category  A 

1 o  When  operational  requirements  of  a  new  vehicle  are  not  defi¬ 
nitely  determined,  and  deelgn  maneuvering  and  ground  loads 
and  loading  di a trl buti one  cannot  be  definitely  ascertained 
•within  small  toleranoes'o 

2  Whsn  pssitivs  steps  are  not  taken  to  prevent  exceeding  the 

speoifled  design  limit  maneuver  load  factors,  inadvertently, 
due  to  undesirable  low  stick  force  in  pounds  per  g  and  unduly 
light  control  forces  in  generals 

30  When  adequate  experimental  data  are  net  available  for  use  in 
design,  and  before  delivery  of  the  vehicle<> 
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^iwpUi  in  Categsry  A  (con id.) 

4.  >he  n  structural  behavior  nut  to  aerodynamic  beating  or  other 
phenomena  cannot  be  accurately  determined. 

5.  When  non-linearity  in  asrodynaaie  data  or  structural  ~*flo«tlono 
can  be  cataetrophic  If  the  liait  design  conditiene  i.re  exoeeded 
by  only  a  enall  amount.  Thia  is  especially  serious,  nines 
aany  people  have  thought  that  an  ultiaate  factor  of  safety 

of  1.8  indicates  that  the  vehicle  strength  is  good  for  an 
ultiaate  lead  factor  of  SOjf  above  the  Halt  load  factor^ 

Category  B  -  Design  aspects  wherein  a  reduction  in  the  ultiaate 
factor  of  safety  should  be  q  cbs 1  do  rod  and  caa 
beat  be  deterained  through  a  probability  of 
failure  approaob.  (Structure  designed  in  thin 
category  vould  still  have  no  perceptible  aot, 
or  yield,  at  or  below  the  liait  loading  condition.) 

Exaapioa  in  Catogory  B 

(in  tho  f o  1  Using  Category  B  examples,  it  is  assumed  that  where 
the  t«n(i)  *load(e)",  " 1 sadi ng( s ) "  or  "loading  condi  tion(s)"  bavo 
been  used,  it  or  they  will  be  based  upon  the  aeac  or  operating 
value,  plus  soae  constant  times  the  standard  deviation  of  the 
distribution;  in  order  that  a  true  liait  value  will  be  feraed, 
having  a  apacified  low  probability  of  oocurence.) 

lc  Loadings  resulting  froa  ria  preaaur'-. 

Theae  loadings  esn  be  det<  th  fair  accuracy  aod 

it  la  not  likely  that  liait  design  . .  t  will  bs  exceeded 
if  the  vehicle  stays  within  its  specified  speed  altitude, 
trajectory  and  7or  orbit  Halts.  Structures  such  as  intalics 
durts  would  bs  consldsrsd  under  this  psint. 

2.  Loadings  froa  pre s eur i it t i on ,  such  as  pressurised  cabins, 
psrsonnel  enclosures,  propellant  tacks,  s to . 

Such  lendings  are  controlled  by  s  pressure  relief  or 
control  vslve  and  it  is  not  likely  that  liait  design  leadings 
will  be  exceeded,  unless  malfunction  occurs.  It  may  be  Bars 


I.  Where,  generally,  the  ultimate  factor  of  safety  now  is  1.8,  a 
reduction,  to  an  approximate  level  of  »  1  -  1.2,  ei.o:  'd  be 
possible  with  an  adequate  statistically  based,  stru.  t r a  1 
analysis  approach. 
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eeenosileal  to  Install  do  si  relief  cr  control  system  rathor 
than  to  provide  oxooboIto  strength  in  the  structure  for  aueh 
nal functions .  la  any  determination  of  the  reconutaded  factor 
of  safety  for  the  bursting  of  pressure  vessels,  a o coant  should 
bo  taken  of  the  difference  between  roal  and  apparent  alt ins to 
footers  of  safety  eausod  by  notarial  property  effoeta  (pr in¬ 
ertly,  strain  hardening)0 

3.  Loadings  fren  hydraulic  systoas  which  hare  relief  valves. 

4c  Thrust  loadings  froa  engines,  Including  rocket*. 

Thao#  leadings  are  determined  with  fair  aocuraey  and  it 
ie  not  likely  that  liait  design  loads  will  be  exoeoded, 

Generally,  a  larger  pereentage  variation  of  the  ratie  of 
standard  deviation  of  thrust  to  noon  thrust  will  bo  found  with 
•olid  rooketa,  than  that  found  with  liquid  rockets. 

Bo  When  leadings  are  duo  to  buffet  boundaries  sf  an  air  vehiele0 

This  la  a  rather  questionable  Item  wltheat  flight  teet  '*'* 
infernatien,  sines  it  is  difficult  to  deternlna  lead  nagmlfi- 
oatloae  when  the  buffet  boundaries  are  reached  or  exceeded. 

0.  When  loadings  are  due  te  preuawre  levels  spproashing  absolute 
vacuum 0 

7.  When  leadings  are  due  to  ternlnsl  velocity. 

It  is  net  likely  that  a  liait  ternlnsl  velesity  vtll  hs 
sxssadsd.  Affsetsd  atruoturss  nay  insluds  aaaeplsa,  tall 
surfaoes,  Inlat  dusts,  noss  cents,  re-entry  vehielea,  etc., 
depending  upon  tthe  load  distrlbutionSo 

Be  When  loadinga  are  due  te  hinge  seuneat  llnitstisnso 

Many  control  surfaces,  suoh  as  flaps,  ailerons,  elevens, 
ate.,  have  hinge  soasat  Imitations  das  to  the  available  fares 
of  a  servo  actor  or  a  hydraulic  operating  cylinder.  Therefore, 
the  -ax i aim  available  bingo  Benefits  on  the  surf see*  can  he 
determined  with  fair  aeeuraey°  If  adequate  toler-inees  have 
seen  established  for  eentsr  sf  pressure  sad  eenter  of  gravity 
locations,  then  the  design  leads  son  bo  determined  on  the  control 
surface  structure  sod  it  is  net  likely  that  they  will  be  exeoededo 
la  naay  eases,  over-all  wing,  tail,  and  fuselage  loads  and  total 
▼ohlelt  land  factors  are  United  to  probability  based  Unit 
lsvolo  because  of  suoh  bingo  assent  linitationSo 
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Emapl  f  «  In  Category  B  (  c  o  n  t  d  .  ) 

9.  When  liait  loadings  result  from  smiaua  control  surface  (or 
other  aerodynaai cal  1 y  loaded  surface)  deflections0 


Soae  design  criteria  specify  aaiiaua  control  surface  (or 
other  aerodynaai cal  1 7  loaded  surface)  deflection,  for  surfaoes 
such  as  speed  brakes,  dive  brakes,  tabs,  cowl  flaps,  etc.,  at 
•  11  design  mr  speeds  up  to  aaziaua.  If  good  data  are  obtain¬ 
able  froa  flight  or  wind  tunnel  testa,  then  it  can  be  stated 
that  the  bait  loadings  should  not  be  exceeded,  within  the 
calculated  probability* 

10  When  practical  g-liait*r  or  gust  alienator  installations  are 

aval 1 abl e . 

In  auoh  oases,  it  is  not  likely  that  the  liait  loading  will 
be  exceeded.  Uowrver,  malfunction  of  such  installations  should 
bo  taken  Into  oone i do r <t t i an .  Here  again  it  Bay  be  aero  econoai- 
oal  to  install  a  dual  syatea,  than  to  penalize  the  structural 
weight  to  take  care  of  sal func tione 0 

11.  When  autoantic  controls  are  installed  on  vehicles  for  ground 

or  flight  conditions  and  the  loading  conditions  will  be  restricted 
to  the  epeoified  loadings. 

This  method  is  already  in  use  on  aleeiles  and  the  criteria 
of  an  ultimate  factor  of  safety  lees  than  1.5  haa  bean  accepted 
practice  with  considerable  succese.  In  order  for  aero-epace 
vehicles  of  the  future  to  accomplish  their  aiesiona  succese fu 1 1 y , 

it  will  be  necessary  to  rely  more  and  sore  on  automatic  controls 
rather  than  manual  operations.  Probability  of  failure  of  such 
automatic  controls  may  be  high,  and  therefere,  dual  syeteas  may 
be  required. 

1H.  When  the  factor  of  eafety  times  the  liait  loads  encountered  froa 
the  liait  gust  velocities  result  in  ultiaate  gust  expectancies 
considerably  in  excess  of  the  estimated  air  life  of  the  vehicle. 

13„  When  the  factor  of  safety  times  the  liait  external  loads 

encountered  in  flight  or  ground  conditions  result  in  ultiaate 
external  dosign  loads  considerably  In  excess  of  ultiaate  external 
lends  based  on  the  factor  of  safety  times  the  limit  load  factors* 


14.  When  stresses  ere  due  to  aerodynamic  heating* 

It  la  not  likely  that  such  stresses  will  be  exceeded,  if 
the  Halt  design  speed  of  the  vehicle  and  the  rate  of  temperature 
rlee  are  within  the  Halt  1 o ad- temper eture- time  condition. 
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EiupIm  Id  Cateisry  B  (contd.) 

15<>  Whan  land  Haiti  have  been  determined  by  adequate  flight 
and/*  r  ground  loads  dtaom  triti  oni . 

If  a  vehicle  has  been  subjected  to  an  extensive  loads 
program  and  it  has  been  deaonstrated  that  certain  loading 
conditions  should  not  be  exceeded,  then  It  xhould  be  possible 
to  take  advantage  of  these  load  limitations  by  formulating 
new  probability  based  limit  loads  for  (feaign  of  any  future 
modi ficationa  of  the  vehicle0 
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0.°  conclusions 

The  concept  of  'probability  of  failure'  will  not  supplant  tho 
conotpt  of  'faotor  of  eufety'  in  the  sntjre  structural  snglnterlgg 
profession  for  some  tias,  Tho  agenoies  and  the  professional 
people  involved  are  not  ready  for  such  a  radioal  ohange  in  the 
engineering  approaoh  to  etructural  design  and  analysis.  Enough 
will  be  gained  if  they  are  gradually  reconciled  to  the  faot  that 
the  oonoept  of  'factor  of  safety*  is  meaningless,  unless  it  is 
supplemented  by  the  specification  of  the  probability  of  failure 
associated  with  it.  Therefore  any  reasonable,  efficient  design, 
even  the  most  ooaplete  and  conservative  one,  tacitly  implies  an 
accepted  risk  of  failure.  Tho  difference  between  the  eafe  and 
unsafe  design  la  in  the  degree  of  risk  considered  acceptable, 
not  in  the  delusion  that  such  a  rink  onn  be  completely  eliminated. 

Structural  engineering  in  the  aero-epaoe  vehlol e  field,  however, 
le  ready  for  a  probability  of  failure  approaoh  to  factors  cf  safety 
and  structural  analysis!  the  following  conclusions  apply  to  the 
development  of  that  approaoh: 

1„  Correlation  of  Faotor  of  Safety  (or  Factor  of  Servioeabi 1 ity) 
with  probability  of  survival  and  probability  of  aervlceabi 1 ity 
for  each  individual  structural  element  designed  is  impractical^ 

2.  It  is  practioal  to  consider  suoh  correlation  in  framing 

design  rules  and  regulations.  In  fact,  It  is  very  dssirabls. 

It  should  be  inquired,  "What  ie  the  probability  of  loset" 

3  Statistical  and  probability  studies  are  only  guides  (like 
mathematical  tools)  and  must  be  supplemented  by  the  appli¬ 
cation  of  cosuaon  sense  and  engineering  judgment. 

4.  Work  on  safety  factors  will  be  of  little  avail  until 
■tructures  engine  rs  hare  acquired! 


a.  A  statistical  background  of  Information  on  the 

resistance  of  materials  and  structures,  inoluding 
time-yield,  dynamic  and  fatigue  effects. 
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b.  A  iiailar  background  for  load  offectoo 

o.  Coapstoncs  In  probability  and  statistical  analysts 
(IqtoItm  considsrafcls  educational  effort)0 
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Th 1 »  survey  pointed  out  th#  need  for  such  additional  Investi¬ 
gative  and  educational  effort. 

1.  Research  and  publication  of  reaulte  should  bo  undertaken, 
aa  aoon  na  possible,  in  the  fsllovinf  fields: 

a.  The  variable  nature  of  the  resistance  of  materials 
and  n  true  tu  r • s  „ 

b.  The  variable  nature  of  leads  and  environment,, 

2.  The  education  of  structures  engineers  should  be  fostered 
so  th?  t  they  nay  acquire: 

a.  A  statistical  background  regarding  the  resistance 
of  materials  and  structures,  including  time-yield, 
dynamic  and  fatigue  effects. 

b.  A  sinilar  background  regarding  land  effect*, 

o.  The  necessary  competence  in  tbs  oaiculus  of 
probability,  which  includoo  tho  elements  of 
statistical  analyaioo 

3.  Raaoarch  landing  to  reconuuondod  factors  af  safety,  and 
the  associated  prebabi 1 i tiee  of  failure,  for  general 
structural  components  af  acra-spae#  vehicles*,  GBE^  *ud 
GSe'  should  be  started,  new, 

io  Additional  statistical  dnta  should  bs  oollsctsd  sn  loads 
which  occur  vary  rarely,  so,  as  to  make  passible,  a  sort 
reliable  estimate  of  the  magnitude  of  standard  leads. 


10  Astronoutics  work,  for  the  present,  would  be  limited  to  ICBM, 
satellite  and  re-entry  vehicle  compenents  (engine*,  engine 
meunte,  wings,  tails,  control  surfaeoa,  control.,  pressure 
vessels,  hydraulic  or  pneumatic  lines  and  fittings,  prspellant 
tanka,  pereonnel  enclosures,  etc.). 

2.  Components  o  f  hsmskbre,  erection  booms,  trailers,  eto 

3.  Components  of  towers,  propellant  sterags  tanka,  blockhouses,  ate. 
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So  Th«  application  of  optinaa  design  considerations  to 
itruclarti  aubj«cted  to  two  critical  load  conditiona 
(a.g.,  a  aaxiaua  positive  load  condition  and  a  maximum 
negative  load  condition)  which  affect  largely  different 
anountn  of  Material,  10  aa  to  establish  the  beat  dia- 
tribotion  of  the  probabi 1 i ti ta  of  failure  between  the  twe 
indiridual  lead  conditiona  and  their  effect  on  atructeral 
weight 

6.  Moat  Mechanical  and  pbyecial  propertiea  of  Material  uaed 
in  the  comtruc  tion  of  aero-apace  eehiclee,  GHK  and  G3E 
ahould  be  evaluated  on  a  probability  baela  for  design 
allowable  propertiea  (wetbode  aioilar  to  those  presented 
in  ref.  IV  -  15,  should  be  employed)*, 

7.  Teata  for  determining  dealgn  allovablee  of  atrnotural 
eleeenta,  critical  in  lnatabllity,  or  atructural  connect- 
lone,  critical  in  fracture,  sheer,  etc.,  ahould  be  eval¬ 
uated  on  a  etatisti*al  baaia  (methods  elellar  to  theaa 
preaented  in  ref.  IV  -  15,  ahould  be  employed)*. 


4 o  Unlean  the  eeleoted  probability  function  ia  germane  to  the 
problem,  and  adequately  represents  the  inherent  atatietlcnl 
variability  of  the  phenomenon,  which  roeulte  from  certain  baalo 
aaeumptlone  concerning  its  origin,  extrapolation  toward  the 
extremes  (taila  of  the  functioa)  will  reault  in  irronioua  pre- 
dlctlone  within  thia  range  af  virldion,  which  la  Juat  the 
relevant  dealgn  range, 


Preliminary  stady  of  the  eta  ti  a  t  i  c  al  v  ariationa  of  struotnral 
design  parameters  indicate  fair  correlation,  as  followa: 


Type  of  PlatrlbutloB  < 
Normal 


Lef«*«raa.l  or 

hxponen  ti a  1 


Gumbel's  or  Peiaton'a 


Structural  Application 

Analysis  of  random  loads,  loadimg 
conditiona  and  material  mechani¬ 
cal  properties. 

Analysis  ef  frequency  function  ef 
gusts,  unterial  fatigue  propertiea 
and  maverial  uechanieal  properties 
(e.go,  Fty )  a  f  footed  by  a 

good  to  fair  level  of  quality 
control. 

Analysis  af  Material  Mechanical 
properties  (e.g.,  Ptu,  »tj)  affect¬ 
ed  by  a  poor  level  ef  qua  1  i  ty  eeutraL 
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HECOMMINDVTIONS  (cont'd.) 

8  All  structural  element  testa  conducted  to  prsvs  structural 

adequacy  or  properties  should  be  run  with  a  saaple  sufficient 
in  site  eo  that  realistic  statistical  conclusions  can  l>» 
drawn. 


NOTKi  An  existing  fallacy,  in  the  practical  application  cf  ctatlctics, 
is  the  use  of,  am  Plu*  «ln*J  lillil*  *•  •»il**tc 

the  maximum  or  minimum  expected  Talus.  Thie  "Three-sigma*  preoedare 
Is  quite  common  in  the  estimation  of  structural  design  parameters  for 
aero  apace  vehicles. 

In  the  first  place,  s  is  meant,  net  T*  .  Sigma  implies  that  the  entire 
population  is  known;  which,  in  most  structural  design  asses,  is  quits 
unlikely.  The  sample  standard  deviatisp,  a,  is  the  beat  estimate  of 
CT  ,  the  true  standard  deviation  af  the  entire  population. 


The  fallacy  of  this  "Three-e igma”  seek  book  rule  should  be  obviona* 

If  the  initial  variate  is  unlimited,  the  largest  valns  is  unlimited, 
too,  nnd  if  the  sample  else  la  lnsreassd,  the  largest  value  encountered 
will  likewise  lnoresss.  Therefore,  far  very  email  sample  sites,  the 
3s  ("Three-sigma")  criteria*  may  give  an  uconservati ve  (net  extrema) 
estimate ;  far  very  large  sample  sisss  the  3s  ("Three-sigma")  oriterien 
may  give  a  toe  oenaervative  (tee  extreme)  estimate.  Seme  examples 
of  thie  fellows 


3— pie  Slae 

ZlillLkSA 

Probability  of 
Exceeding  (with  99* 
Confidence) 

Probability  ef 
net  Exceeding 
(99*  Ct&f i deuce) 

7 

11 

17 

88 

oo 

Mean  +  3s 

Mean  +  3s 

Uean  +  3a 

Uean  +  3s 

Uean  ♦  3 <2- 

22* 

9* 

5* 

1* 

0.13* 

T8* 

91* 

95* 

99* 

99.87* 

A  more  scientific  and  realistic  method  of  estimating  maximum  or 
minimum  values  would  be  te  use  extreme  value  theory  and  estimate 
these  max  er  min  values  to  a  certain  level  of  probability  (e.g. 
90*  probability,  1*  probability,  etc.)  of  occurrences 
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